search

lichess-org / lila

♞ lichess.org: the forever free, adless and open source chess server ♞
https://lichess.org
GNU Affero General Public License v3.0
15.62k stars 2.28k forks source link

Error 403 #3996

Closed SoftwUser closed 6 years ago

SoftwUser commented 6 years ago

Starting from anytime today lichess.org looks like this:

lichess

It happens using Chrome latest stable on Windows Desktop, Chrome latest stable on two Chromebooks and with Opera 50.0.2762.67 on Windows Desktop.

What is wrong?

niklasf commented 6 years ago

Looks like for some reason Cloudflare (our CDN provider) has flagged your IP. A temporary workaround is going to https://lichess1.org/?nocache and solving the CAPTCHA.

SoftwUser commented 6 years ago

Thank you! Indeed switching to the mobile (cellular) WLAN (with a different IP) shows no problems. So as my ISP assigns new IPs dynamically every 24 hours, that explains why it occurred for the first time today and on different systems/OS. So I am confident that with a new IP (to be assigned this night) the problem will be resolved. Thanks for the alternative link, too!

SoftwUser commented 6 years ago

Today I can confirm that with the new IP (from a different range) the problems are gone. Highly problematic though that Cloudflare flags IPs (maybe even ranges?) that are temporarily assigned (for max. 24 hours). Millions of internet users are affected by daily changing IPs provided by their providers.

Anyway I reopen this issue as the workaround using the above given alternative link did not work. After confirming the CAPTCHA the site had been rendered the same way as in the above posted picture (I cleared the cache completely before entering). So there actually has been no workaround for the issue.

niklasf commented 6 years ago

Going to https://lichess1.org/?nocache1, https://lichess1.org/?nocache2, https://lichess1.org/?nocache3 etc., does the CAPTCHA appear again?

We set this CAPTCHA protection to "essentially off". Unfortunately disabling it entirely is only possible with their business plan for 200$/month :(

SoftwUser commented 6 years ago

@niklasf

I cannot test it, until my ISP some day will assign a "flagged" IP again. It's a lottery...

niklasf commented 6 years ago

I tested by cycling through Tor circuits. The workaround is of course not ideal, but this is supposed to be super rare :/

SoftwUser commented 6 years ago

I hope it will be rare...

@niklasf

But my issue has been that after a successful CAPTCHA-procedure lichess.org did not open as expected but still as illustrated by the image in the first posting. So for any reason the workaround did not work...

So the issue was not about a CAPTCHA not appearing but about a successful CAPTCHA not leading to the expected result.

I this issue resolved?